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Abstract: Digital watermarks are used to prevent the possession 
and transmission of copyright intellectual property over the 
internet. Digital watermarking system is playing an 
irrevocable role in privacy-preserving, buyer-seller 
communication and e-commerce of digital content. In the past, 
many buyer-seller protocols have been proposed to address 
the copyright issues. Most of these protocols are only 
protecting digital copyright of the digital content. This paper 
proposes a new efficient buyer seller watermarking protocol 
for secure digital transaction and to identify the Perpetrator 
who actually pirates the digital content. To implement this 
system we use a multi layerTerminate and Stay Resident 
(TSR) scripting programs before embedding the 
watermarking. 

I. Introduction 

The major benefit of digital revolution is the ease of 
communication and duplication of digital contents. Even 
though such benefits often create limitation to the copyright 
owners from having a financial gain from licensing such 
contents, digital watermarking has been prepared as a suitable 
deterrent to illegal copying and distribution. 

A digital watermarking is an imperceptible information, 
regarding the copyright owner, embedded to degrade linearly 
with the degradation of the content itself. Embedding the 
watermark information into the digital content will help to 
identify the originality of the content as well as the copyright 
owner and buyer/dealer. Having a digital watermarking buyer- 
seller protocol for the privacy preservation and to trace piracy 
to the original perpetrator is the need of the day. Moreover 
the system may also provide a provision to buyers, sellers, 
owners or dealers to check the originality of the system. 

In the past, many buyer-seller protocols have been 
proposed to address the copyright issues. Most of these 
protocols [6-13] are not only protecting digital copyright by 
embedding watermarking in digital content but also protecting 
the digital content. 

In Poh and Martin's framework, the buyer generates the 
watermark and the watermarking authority is used to verify 
that the watermark is well formed such as [5] and [12]. My 
previous work [7] and [10] are addressing the issues of 
customer right's and unbinding problem. It also solves buyer 
verification and certification authority obligation problem. 

William etl [14] introduced the concept of rigorous 
analysis of buyer-seller watermarking protocols using a formal 
analysis technique used to check communication protocols. 
All these system have miserably failed to identify the culpit if 
the embedded copyrighted watermarking content on the 

©2011 ACEEE 51 
rX)I:01.DNS.2.4.51 



digital content is changed or hacked. 

Even though many solutions are proposed for many 
issues of privacy and buyer-seller with watermarking, no 
effort has made to identify the perpetrator of the piracy. Buyer- 
seller protocol in this paper is a novel method for protecting 
the privacy and locate the original perpetrator who actually 
pirated the digital content. The proposed system alerts the 
copyright owner regarding the geographical and network 
location of the perpetrator, as soon as privacy is encountered. 

II. Proposed System 

The proposed protocol mainly address the issue to iden- 
tify the perpetrator, as soon as privacy is encountered. The 
proposed model based on any public key cryptosystem has 
five different roles as follows. 

1 . O: The copyright owner of the licensed digital content, 
who wants to sell the product through the seller or 
dealer. 

2. S: The seller or the sales point, from where the buyer 
purchases the digital content. The seller may be the 
original owner of the digital content, or an authorized 
reselling agent or dealer. 

3. B: The genuine buyer, who wants to purchase a digital 
content from the seller S. 

4. H: The present holder of the digital content who is 
processing the pirated watermarked content. 

5. CA: The Watermark Certification Authority is 
responsible for issuing watermark based on 
Transaction Identification number (TID), Holder's 
MAC, Holder'sPublic key (Ps), and Product 
Identification number (PID). The WCA also issues 
the digital signature certificate based on private key 
in such a way that anyone in the electronics commerce 
transaction can check the authenticity to avoid any 
future repudiation. They may appoint trusted Regional 
Watermark Certification Authorities (RWCA) to share 
and reduce its workload. 

6. ARB: An arbiter, who adjudicates lawsuits against the 

infringement of copyright and intellectual property. 
This paper restricts itself to further discussion on secu- 
rity or implementation issues related to the public key 
cryptosystem by assuming that a public key infrastructure 
has been well deployed so that each party has its own pub- 
lic-private key pair as well as a digital signature certificate 
issued by WCA. Before elaborating further on the proposed 
protocol, the notations used in this model are defined below. 
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X Original copy of the digital content 

W Generated Watermark, which is to be 

embedded into the digital content X 
MAC Media Access Control (MAC) address of the 

networking device is used for generating the 

watermarking. MAC is also used identify the 

perpetrator. 

PID Unique number given by the CA to identify a 

digital product, which will be published in 
website for anyone who is likely to take part 
in the transaction. 

TDD The CA is responsible for issuing a unique 

random number for every transaction, in order 
to prevent the duplication when selling more 
copies of a digital content to a specific B by 
aSor O. 

TSR A kind of a Terminate and Stay Resident (TSR) 

scripting program that can access MAC of 
the system to compare the same in the 
watermarked content. No access to memory 
or processing or any other system unit. The 
TSR will active till the digital content is 

WID Watermark Identification number is generated 

by CA, which is only known to CA for 
verifying the originality of the purchased 
product. WID will be stored in a database 
along with TID, PID, B, S details. 

© Watermark information binary insertion 

operator, which inserts watermark into the 
original copy of digital content. 

X' Watermarked digital content, where the 

watermark W is inserted into the digital 
content X using a function \i, u.(X©W). 

(P s , S s ) A public-secret key pair, where P s is S's public 
key and S s is S's secret key. 
Public key encryption and decryption algorithms 

E pb (M) The message M is encrypted using B's 
public key 

D^C) The cipher text C is decrypted using CA's 
private key 
By X©W means, where W = (W S ®W B ) 

x,(Dw,,xJBw^ x©w,x ,©w , x ©w I 

112 2 n n n+1 n+1 m m J 

A privacy homomorphism with respect to the binary 
operator © is applied to insert a watermark W to any original 
copy of the digital content X. For every a and b in the message 
block, © has the property that 

E pK (a©b) = E pK (a)©E pK (b) 

where PK is the public encryption key. The buyer-seller 
protocol in this section, using watermark techniques for an 
efficient and secure digital transaction, has five sub-protocols: 
Registration and Buyer-Seller Protocol, TSR Watermarking, 
Perpetrator Alert, Arbitration Protocol and Relocation 
Request. 

A. Registrationand Buyer-Seller Protocol 

Figure 1 shows the proposed registration protocol for 
any buyer-seller networking transaction using watermarking, 
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where the O registers a digital content, to be sold, with the 
Certification Authority (CA) with the Product ID number, PID. 
Once the O reaches to an agreement on the terms and 
conditions regarding price and service with the seller or dealer 
S, it will request the CAto issue the digital marked content to 
S with their Media Access Control address, MACo, and public 
key,Po for the a specific product transaction, TID. 




Fig. 1 Registration and Buyer-Seller protocol 

Figure 2 has the details of possible transactions in the 
proposed registration and Buyer-Seller protocol, which is 
explained below: 

1 . When O wants to sell a digital content over an internet, 
first it has to register with CAwith the product 
Identification number, PID, and the Public Key P . O 
initiates the registration transaction by sending an 
encrypted PID and P with CA's public key, 
E Pca (HD+P s ). 

2. CA generates the unique watermarking after collecting 
the MAC , P and Transaction identification number, 

' 

TID. The this watermark is combined with the TSR 
scripting program 

E po [X©TSR©W(MACo, TID, Po)] 
All these details are stored in the CA's database, and it 
is only known to CA and corresponding arbitrator ARB. 

3. O will identify, negotiate, and finalize the terms and 
conditions of the possible dealers, D or a Seller, S; to 
possibly identify the genuine Buyers, B. 

4. O will request CA to issue the watermarked content of 
PD3toS.Ep ca (Ps,PID) 

5. CAidentifies the MAC of S and issues the watermarked 
content to S, for possible display and identification of 
the genuine Buyers, B 

E ps [X © TSR ©W(MACs, TD3, Ps)] 

6. CA sends the acknowledgement, E po [ACK(Ps, PID)], to 
O regarding the watermarked PID to S. 

7. Osends the acknowledgement, E ps [ACK(Ps, PID)], to S 
regarding the watermarked PID from CA. 

8. S will identify, negotiate, and finalize the payments with 
the genuine Buyers, B. 

9. S will request CA to issue the watermarked content of 
PD3toB.Ep ca (Pb,PID) 

10. CA identifies the MAC of B and issues the watermarked 
content to B. 

E pb [X © TSR ©W(MACb, 1 11), Pb)] 

1 1 . CA sends the acknowledgement, E ps [ACK(Pb, PD3)], to 
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3. Possible identification of Seller or Dealer 



l.Ep CJ (I'Il],Po) 



2, X®W(MACo, TIP, Po) 



4. Ep r ,(Ps. PIP) 



6. ACK(Ps. PID) 



5. X©W(MACs,TID, Ps) 



B 



Possible identification of Buyer | 



9. Ep^ffli, PID) 


I? U Kll'b. IMD) , 


tl APK(PI> pim , 


\Cb, TID, I'll) 


10. XEBWCM. 



CA 

Fig. 2 Transactions in the Registration and Buyer-Seller Protocol 

S regarding the watermarked PID to B. 
12. Ssends the acknowledgement, E pb [ACK(Pb, PID)], to B 
regarding the watermarked PID from CA. 
At the end of the registration and buyer-seller protocol, 
S is authorized to sell the product PID, by O; and S identifies 
the buyer B to sell the watermarked product through CA. 



Third layer of the TSR watermarking is the actual 
watermark information where P H ,PID and other information 
is embedded to solve numerous other issues resolved till 
now. 



B. TSR Watermarking 

Figure 3 shows the TSR watermarking in 3 layers. The 
base layer is the actual digital content X to be sold. Layer 2 is 
the flag checking TSR scripting program, generated by the 
CA, which will contain encrypted static 10 flag counters (as 
shown in the Figure 4) to store the required information to 
check the piracy. The TSR(runs itself and checks in every 
minute or hour or day as the security of the content demands) 
will access the MAC of the existing place of digital content 
and check the flag of the digital content with the help of KEY 
and P R . If anyone tries to duplicate the content the CARRY 
and KEY changes, and alert generates. If an unauthorized 
person is holding the content without duplicating, then the 
P H (when decrypting the S H ) and MAC changes will be 
noticed. The system implementers have every freedom to 
design the Flag Counters to maximize the security. 



C. Perpetrator Alert 

The Figure 5 shows the Alert mechanism implanted in the 
watermarked content with the help of TSR, when a piracy is 
observed. 





. W(MAC. P^H. PJD,TID> 



Flag checking TSR with Wand MAC 



Actual Digital Content X 



Fig. 3 TSR watermarking in 3 Layer 
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Fig. 4 Static Flag Counters in the TSR Layer 
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Fig. 5 Perpetrator Alert 

Piracy can be detected in three cases by the TSR by 
looking at the flags, MAC and Watermarked contents. Case( 1 ): 
where the holder, H, of the digital content is carrying the 
original digital content intended for another genuine buyer, 
B . TSR will detect this by checking the MAC of the holder. In 
this case H may not be able to use the digital content as H 
will not be able to decrypt using the S H , and requires 
S B .Case(2): where the holder, H, of the digital content is 
carrying the duplicate digital content. The CARRY and KEY 
flag might have changed when duplicating the content. Apart 
from that MAC and P B will differ.Case(3): where the genuine 
buyerB, of the digital content duplicated the original content. 
TSR will identify and alertthe CARRY and KEY flag which is 
changed when duplicating the content. The alert (IP and MAC 
address of the H, PID, P , P c , P u , TID) is often sent to the O of 

' o' S' tP ' 

the digital content and ARB. 

D. Arbitration Protocol 

The information related to the licensed owner, O, and 
corresponding arbitrator, ARB, information is stored in the 
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watermark. Tampering this information will destroy (completely 
or partially) the digital content. As soon as piracy is observed, 
an alert is initiated to the O of the digital content and ARB. 
The ARB further monitors and checks the IP & MAC address 
using the existing network tracking system to trace down the 
perpetrator. 

E. Relocation Request 

Figure 6 illustrates how to handle the relocation of the 
digital content request. There is always a possibility that 
genuine buyer may change the geographical location or the 
computer or the working and storing device. In such cases 
all the purchases will have to be surrendered to CA at 
transaction (1) with the new MAC address, to relocate to 
new device or location. Newly embedded digital content will 
be send to B in the transaction (2); which will be later 
forwarded to transaction (3). 




Fig 6 Relocation Request 

Since the O and ARB gets the alert as soon as piracy 
observed, a proactive action and prevention against duplica- 
tion, which will ultimately lead to copyright protection. 



III. Conclusion 

This paper proposed an efficient and secure buyer-seller 
watermarking protocol to identify the Perpetrator who actu- 
ally pirates the digital content. All the existing system can be 
implemented in layer 3 of watermarking to solve the existing 
many issues stated by other researched in this field. The sys- 
tem is designed for any public key crypto system to restrict 
the unauthorized data drift. The security of this protocol lies 
on the efficient algorithm of TSR scripting program and flag 
counters. The security and robustness of the encryption stan- 
dard and different homomorphism, permutation and combi- 
nation functions used in this protocol also plays an impor- 
tant role, which can further be modified and developed to 
improve the efficiency of the protocol. 
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